File upstart-audit-events.patch of Package upstart

Overview Repositories Revisions Requests Users Attributes Meta

File upstart-audit-events.patch of Package upstart (Revision a628819f28b198009254487d88380bf1)

Currently displaying revision a628819f28b198009254487d88380bf1 , Show latest

diff --git a/util/Makefile.in b/util/Makefile.in
index 26025ce..f7b61a3 100644
--- a/util/Makefile.in
+++ b/util/Makefile.in
@@ -376,6 +376,7 @@ reboot_SOURCES = \
 reboot_LDFLAGS = -static
 reboot_LDADD = \
 	../nih/libnih.la \
+	-laudit \
 	$(LTLIBINTL)
 
 runlevel_SOURCES = \
@@ -399,6 +400,7 @@ shutdown_LDFLAGS = -static
 shutdown_LDADD = \
 	../nih/libnih.la \
 	../nih-dbus/libnih-dbus.la \
+	-laudit \
 	$(LTLIBINTL) \
 	$(DBUS_LIBS)
 
@@ -414,6 +416,7 @@ telinit_LDFLAGS = -static
 telinit_LDADD = \
 	../nih/libnih.la \
 	../nih-dbus/libnih-dbus.la \
+	-laudit \
 	$(LTLIBINTL) \
 	$(DBUS_LIBS)
 
@@ -477,6 +480,7 @@ test_sysv_LDADD = \
 	sysv.o utmp.o \
 	../nih/libnih.la \
 	../nih-dbus/libnih-dbus.la \
+	-laudit \
 	$(LTLIBINTL) \
 	$(DBUS_LIBS)
 
@@ -489,6 +493,7 @@ test_telinit_LDADD = \
 	com.ubuntu.Upstart.Job.o com.ubuntu.Upstart.Instance.o \
 	../nih/libnih.la \
 	../nih-dbus/libnih-dbus.la \
+	-laudit \
 	$(DBUS_LIBS)
 
 all: $(BUILT_SOURCES)
diff --git a/util/reboot.c b/util/reboot.c
index dda2935..eef9ed2 100644
--- a/util/reboot.c
+++ b/util/reboot.c
@@ -36,6 +36,10 @@
 #include <nih/logging.h>
 #include <nih/error.h>
 
+#if 1 /* HAVE_LIBAUDIT */
+#include <libaudit.h>
+#endif
+
 #include "utmp.h"
 
 
@@ -96,7 +100,6 @@ static int poweroff = FALSE;
  **/
 static int exit_only = FALSE;
 
-
 /**
  * options:
  *
@@ -119,6 +122,7 @@ static NihOption options[] = {
 	NIH_OPTION_LAST
 };
 
+static void send_audit_event(void);
 
 int
 main (int   argc,
@@ -216,6 +220,8 @@ main (int   argc,
 	/* Re-enable Control-Alt-Delete in case it breaks */
 	reboot (RB_ENABLE_CAD);
 
+	send_audit_event ();
+
 	/* Do the syscall */
 	switch (mode) {
 	case REBOOT:
@@ -237,3 +243,21 @@ main (int   argc,
 
 	return 0;
 }
+
+/**
+ * send_audit_event
+ *
+ * Send system shutdown audit event
+ **/
+static void
+send_audit_event (void)
+{
+#if 1 /* HAVE_LIBAUDIT */
+	int fd = audit_open ();
+	if (fd < 0)
+		return;
+	audit_log_user_message (fd, AUDIT_SYSTEM_SHUTDOWN, "init",
+		NULL, NULL, NULL, 1);
+	close (fd);
+#endif
+}
diff --git a/util/sysv.c b/util/sysv.c
index fbca39f..32b5540 100644
--- a/util/sysv.c
+++ b/util/sysv.c
@@ -36,6 +36,9 @@
 #include <nih/logging.h>
 #include <nih/error.h>
 
+#include <unistd.h>
+#include <libaudit.h>
+
 #include "dbus/upstart.h"
 
 #include "utmp.h"
@@ -54,6 +57,7 @@
 
 /* Prototypes for static functions */
 static void error_handler (NihError **err, NihDBusMessage *message);
+static void send_audit_event (int old, int level);
 
 
 /**
@@ -161,6 +165,8 @@ sysv_change_runlevel (int           runlevel,
 				 runlevel, prevlevel) < 0)
 		nih_free (nih_error_get ());
 
+	send_audit_event(prevlevel, runlevel);
+
 	/* Make the EmitEvent call, we don't wait for the event to finish
 	 * because sysvinit never did.
 	 */
@@ -199,3 +205,41 @@ error_handler (NihError **     err,
 {
 	*err = nih_error_steal ();
 }
+
+/**
+ * send_audit_event
+ * @old: current run level
+ * @level: new run level
+ *
+ * Send system runlevel change audit event. If level is 0, then
+ * we consider this to be a reboot event.
+ **/
+static void
+send_audit_event (int old, int level)
+{
+#if 1 /* HAVE_LIBAUDIT */
+        int fd = audit_open ();
+
+        if (fd < 0)
+                return;
+
+	/* first runlevel change after boot */
+	if (old == 'N')
+		audit_log_user_message (fd, AUDIT_SYSTEM_BOOT, "init",
+			NULL, NULL, NULL, 1);
+
+	char buf[64];
+
+	snprintf (buf, sizeof (buf),
+		"old-level=%c new-level=%c", old, level);
+	audit_log_user_message (fd, AUDIT_SYSTEM_RUNLEVEL, buf,
+		NULL, NULL, NULL, 1);
+
+	/* shutdown or reboot */
+	if (level == '0' || level == '6')
+		audit_log_user_message (fd, AUDIT_SYSTEM_SHUTDOWN, "init",
+			NULL, NULL, NULL, 1);
+
+	close (fd);
+#endif
+}

Places

File upstart-audit-events.patch of Package upstart (Revision a628819f28b198009254487d88380bf1)

Places